Free flow scam: more than 400 fake websites for toll payment are already known

In the first months of 2026, more than 400 fake websites were identified, which simulate pages for the payment of toll free flow to steal money from drivers. The number is eight times higher than the approximately 50 domains mapped by Kaspersky in February, in the first alert of the survey.

Founded in 1997, Kaspersky is a global cybersecurity company, known in Brazil for its antiviruses, with a team dedicated to tracking digital scams in Latin America. According to the company, fraud begins when the driver searches for toll payment services in search engines and clicks on sponsored ads or social media links.

The pages imitate official platforms and, upon receiving the license plate, display correct car data and an alleged low value debit, compatible with a real rate. Payment is made via Pix and falls into orange accounts in little-known fintechs , with the name of the recipient always changing to make it difficult to trace.

“In a few months, criminals went from dozens to hundreds of fake domains, which indicates a highly scalable and probably automated operation,” says Fabio Assolini, Kaspersky’s chief security researcher for Latin America.

How to pay the free flow without falling into a scam

Those who have a tag don’t need to do anything: the reading is automatic and the amount enters the invoice. Without a tag, the gantry registers the license plate and the driver has 30 days to pay the fare, a deadline defined by ANTT Resolution 6.079/2026. After that, the pendency becomes a serious infraction for toll evasion, with a fine of R$ 195.23 and five points on the CNH.

A series of good practices are agreed upon among internet experts as effective in preventing fraud:

• pay only through official channels: website, app or totems of the concessionaire on the stretch;
• type the address of the concessionaire in the browser instead of clicking on ads;
• before confirming the Pix, check the recipient: transfer to an individual is a sign of fraud;
• be wary of charges by WhatsApp, SMS or email: according to ANTT, neither the agency nor the concessionaires use these channels.